Bybit declares war on North Korea's Lazarus crime-ring to regain $1.5B stolen from wallet
ID: 6cd89280-0b05-5ae3-b79b-f3a2a2c18d4f
STIX ID: report--6cd89280-0b05-5ae3-b79b-f3a2a2c18d4f
Feed Name: The Register (Security)
Bybit disclosed that on Feb 21 a transfer from an ETH cold wallet was manipulated so that over 400,000 ETH and stETH (~$1.5B) were diverted to an unknown address; forensic analysis (Sygnia/Verichains and SafeWallet) indicates the theft resulted from tampered SafeWallet JavaScript hosted on cloud storage after a SafeWallet developer machine was compromised, and attribution has been made to North Korea's Lazarus Group — Bybit has launched a bounty and recovery program to reclaim funds and incentivize tracking of stolen assets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.